Material of Juniper JNCIA JUNOS Day1

1. JNCIA-JUNOS
Training

2. Introduction
2
Foryanto Jaya Wiguna
Is a Network Trainer,
Independent Network Engineer and Consultant
Contact :
foryanto@gmail.com
+62 813 827 34574

3. Agenda
3
 1st Day:
 Introduction
 Network Fundamental
 JUNOS Software Fundamentals
 Initial Configuration
 Second System Configuration
 Operational Monitoring and Maintenance
 Lab 1
 2nd Day :
 Routing Fundamentals
 Routing Static
 Routing Dynamic
 Routing Policy
 Firewall
 Lab 2 & 3
 3rd Day :
 Full Lab 4 (Challenge)

4. 4
Network Fundamental
Foryanto Jaya Wiguna
JNCIA-JUNOS

5. OSI Model
5

6. Protocol
6

7. Tranversing Network Model
7

8. Application Layer
8

9. Transport Layer
9

10. Transport Layer
10

11. Network Layer
11

12. Data Link Layer
12

13. Data Link Layer
13

14. Physical Layer
14

15. Summary
15
OSI MODEL PDU Protocol Addressing
Network
Device
Application Data
HTTP, HTTPS, DNS,
SMTP, POP, FTP
Presentation
Session
Transport
Transport
Header
Data
TCP,UDP Port Number •Firewall
Segment
Network
Network
Header
Segment IP, IPX, Appletalk,
ICMP
IP Address
•Router
•Multi Layer
Switch (MLS)
Packet
Data Link
Frame
Header
Packet
Frame
Trailer 802.3, 802.11, PPP,
frame relay
MAC Address
•Switch
•Bridge
Frame
Physical Bit
•Hub
•Repeater

16. IPv4 Address
16
Stuktur IPv4
• Alamat IPv4 terdiri dari 32 bit
• Alamat IPv4 dibagi menjadi 4 oktet (8 bit) yang dipisahkan oleh dot
desimal.
• Alamat IPv4 terdiri dari dua bagian, yaitu bagian network dan
bagian host

17. IPv4 Address Class
17

18. IPv4 Address
18
• Alamat Jaringan
Alamat yang merujuk pada suatu jaringan

19. IPv4 Address
19
• Alamat Broadcast
Suatu alamat khusus yang digunakan untuk mengirimkan data ke semua
host dalam jaringan yang bersangkutan.

20. IPv4 Address
20
Alamat Host
Alamat yang diberikan kepada perangkat di suatu jaringan.

21. IPv4 Address Classification
21
Blok alamat private adalah:
10.0.0.0 sampai 10.255.255.255 (10.0.0.0 /8)
172.16.0.0 sampai 172.31.255.255 (172.16.0.0 /12)
192.168.0.0 sampai 192.168.255.255 (192.168.0.0 /16)

22. IPv4 Address Classification
22
Alamat IP yang tidak dapat digunakan sebagai alamat Host:
• Alamat Network dan alamat Broadcast
• Alamat Default Route (0.0.0.0/8)
• Alamat Loopback (127.0.0.0/8)
• Local Link 169.254.0.0 s/d 169.254.255.255

23. Subnet Mask and Prefix Length
23
Prefix length adalah banyaknya bit pada alamat tersebut yang
merupakan alamat jaringan. Misalnya, dalam 172.16.4.0 /24, tanda
/24 adalah prefix length yang menunjukkan kepada kita bahwa 24 bit
pertama adalah alamat jaringan atau bagian alamat jaringan. Dan
sisa 8 bit atau oktet terakhir menujukan bagian dari host pada
jaringan tersebut.

24. IPv6
24
Do We Really Need a Larger Address Space ?
• Internet Users or PC
~530 million users in Q2 CY2002, ~945 million by 2004
(Source: Computer Industry Almanac)
Emerging population/geopolitical and Address space
• PDA, Pen-Tablet, Notepad,…
~20 millions in 2004
• Mobile phones
Already 1 billion mobile phones delivered by the industry
• Transportation
1 billion automobiles forecast for 2008
Internet access in Planes
• Consumer devices
 Billions of Home and Industrial Appliances

25. IPv6 Model
25

26. IPv6 Addressing
26

27. IPv6 Addressing
27

28. 28
JUNOS Software Fundamental
Foryanto Jaya Wiguna
JNCIA

29. Juniper Networks
29
• Started in 1997 by Silicon Valley engineers with VC
funding. Went public in 1999.
• Provides infrastructure solutions for service providers with
optically-enabled IP networks
• Revenues
 Fiscal Year 1999: $102.6 million
 First 6 months of 2000: $177 million
• One of the most successful technology IPOs in history.
Nasdaq:JNPR
• Market capitalization: ~ $42 billion

30. Juniper Product (1)
30

31. Juniper Product (2)
31

32. Juniper Product (3)
32

33. Juniper Certification Track
33

34. Junos OS Overview
34
 A common language across Juniper’s routing, switching, and security
devices
 Reduces complexity, increases availability, lowers TCO

35. Juniper Advantage
35

36. Junos Software
36
 Robust, modular operating system
• Provides industry-leading peformance and scalability
• Based on the FreeBSD UNIX operating system
• Each process runs in its own protected memory space, ensuring that
one process cannot directly interfere with another.

37. Single Software Train
37
 A Single software train for all platform running JUNOS Software
• Ease management overhead by providing a consistent set of feature
that are implemented in a consistent manner
17.3

38. Separation of Control and Forwarding
38
 All platform running JUNOS software share a common design goal:
• Clean separation of control and forwarding functions
17.3

39. Separation of Control and Forwarding
39
 All platform running JUNOS software share a common design goal:
• Clean separation of control and forwarding functions

40. Routing Engine
40
 Maintaining Routing Protocol and Forwarding Tables
 Control and Monitors the Chasis
 System management and User Access
 Manage the FPE

41. Packet Forwarding Engine
41
 Uses Layer 2 and Layer 3 forwading table, provided by RE, to forward
traffic toward its destinaton
 Implements various service such as policing, stateless firewall filtering
and class of service

42. Transit Traffic Processing
42
 Transit Traffic is forwarded through the local system
 PFE uses the forwading table provided by RE
 Example of transit include unicast and multicast

43. Exception Traffic Processing
43
 Exception traffic is processed by local system (1)
 Traffic destined for the local system is processed by RE CPU (exp:
Routing update, telnet session, ping, traceroute)
 Traffic requiring the generation of ICMP message (exp: TTL expired)
 Exception traffic is limit-rated rellated to protect from DOS (2)
1 2

44. Common User Inteface Options
44
 Agenda : User Interface Options
o User Interface Options
 The JUNOS Software CLI
 CLI Basics
• Operational Mode
• Configuration Mode

45. CLI Modes
45

46. Context-Sensitive Help
46

47. Topical Help
47

48. Command and Variable Completion
48

49. Command and Variable Completion
49

50. Editing Command Lines
50

51. Using | (pipe)
51

52. Common User Inteface Options
52
 Agenda : User Interface Options
o User Interface Options
 The JUNOS Software CLI
• CLI Basics
 Operational Mode
• Configuration Mode

53. CLI Operational Mode
53

54. Operational Mode Capabilities
54

55. Common User Inteface Options
55
 Agenda : User Interface Options
o User Interface Options
 The JUNOS Software CLI
• CLI Basics
• Operational Mode
 Configuration Mode

56. Active Versus Candidate Configuration
56

57. Overview: The Life of Configuration File
57

58. Enterring Configuration Mode (1)
58

59. Enterring Configuration Mode (2)
59

60. Configuration Statement Hierarchy
60

61. Moving Between Level
61

62. Moving Between Level (2)
62

63. Adding Configuration Statements
63

64. Removing Configuration Statements
64

65. Helpful Configuration Mode Command
65

66. Commiting Of Configuration (1)
66

67. Commiting Of Configuration (2)
67

68. Backing Out of Configuration Changes
68

69. Saving Configuration Files
69
Saving Configuration disimpan di /var/home

70. Load Configuration File
70

71. Using Run Command
71

72. Overview Junos Platform
72
 SRX Series Services Gateways
The SRX Series services gateways provide up to 120 Gbps of
throughput. The SRX Series family is designed to meet the network and
security requirements for consolidated data centers, managed services
deployments, and aggregation of security services in both enterprise
and service provider environments.
Initial Configuration
Foryanto Jaya Wiguna
JNCIA

73. Initial Configuration
73
 Agenda : Initial Configuration
 Factory-Default Configuration
o Initial Configuration
o Interface Configuration

74. Factory-Dafault Configuration
74

75. Loading a Factory-Dafault Configuration
75

76. Initial Configuration
76
 Agenda : Initial Configuration
o Factory-Default Configuration
 Initial Configuration
o Interface Configuration

77. Power On and Off a JUNOS Device
77

78. Initial Configuration Check List
78

79. Initial Configuration Check List
79

80. Initial Configuration (1)
80

81. Initial Configuration (2)
81

82. Initial Configuration (3)
82

83. Initial Configuration (4)
83

84. Viewing the Result
84

85. The Rescue Configuration
85

86. Initial Configuration
86
 Agenda : Initial Configuration
o Factory-Default Configuration
o Initial Configuration
 Interface Configuration

87. Overview of Interface
87
 Agenda : Initial Configuration
o Factory-Default Configuration
o Initial Configuration
 Interface Configuration

88. Overview of Interface
88

89. Interface Naming
89

90. Interface Naming
90

91. Interface Naming
91
Flexible PIC Concentartors (FPC) Slot Number PIC Slot Number

92. Logical Unit
92

93. Interface Configuration Example
93

94. Tracking Interface State
94

95. Overview Junos Platform
95
 SRX Series Services Gateways
The SRX Series services gateways provide up to 120 Gbps of
throughput. The SRX Series family is designed to meet the network and
security requirements for consolidated data centers, managed services
deployments, and aggregation of security services in both enterprise
and service provider environments.
Secondary System Configuration
Foryanto Jaya Wiguna
JNCIA

96. Secondary System Configuration
96

97. User Authentication
97

98. Authentication Order (1)
98

99. Authentication Order (2)
99

100. Component of Authorization
100

101. Authorization
101

102. Authorization Configuration Example
102

103. Authorization Configuration Example
103

104. Secondary System Configuration
104

105. System Logging Overview
105

106. Syslog Configuration Example
106

107. Interpreting Syslog Messages
107

108. Secondary System Configuration
108

109. NTP Clock Synchronization
109

110. Monitor NTP Clock Synchronization
110

111. Secondary System Configuration
111

112. Archiving Configuration Files
112

113. Archiving Configuration Files
113

114. Secondary System Configuration
114

115. SNMP Overview
115

116. SNMP Overview
116

117. SNMP Example
117

118. Monitoring SNMP Operation
118

119. Overview Junos Platform
119
 SRX Series Services Gateways
The SRX Series services gateways provide up to 120 Gbps of
throughput. The SRX Series family is designed to meet the network and
security requirements for consolidated data centers, managed services
deployments, and aggregation of security services in both enterprise
and service provider environments.
Operational Monitoring and Maintenance
Foryanto Jaya Wiguna
JNCIA

120. Operational Monitoring and Maintenance
120

121. Monitoring Tools
121

122. Monitoring System-Level Operation
122

123. Monitoring the Chasis
123

124. Verifying Interface Status
124

125. Terse Output Example
125

126. Monitor Interface Traffic
126

127. Operational Monitoring and Maintenance
127

128. Network Utilities (1)
128

129. Network Utilities (2)
129

130. Operational Monitoring and Maintenance
130

131. Display the JUNOS Software Version
131

132. JUNOS Software Naming Convention
132

133. Operational Monitoring and Maintenance
133

134. Password Recovery
134

135. 135